City: Alajuela
Region: Alajuela
Country: Costa Rica
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.207.66.82
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52932
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;201.207.66.82. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 20:37:17 CST 2025
;; MSG SIZE rcvd: 106Host 82.66.207.201.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 82.66.207.201.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 177.128.104.207 | attackbotsspam | Bruteforce detected by fail2ban |
2020-04-09 06:00:02 |
| 104.248.117.234 | attack | (sshd) Failed SSH login from 104.248.117.234 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 8 21:44:20 andromeda sshd[18346]: Invalid user guest from 104.248.117.234 port 37078 Apr 8 21:44:22 andromeda sshd[18346]: Failed password for invalid user guest from 104.248.117.234 port 37078 ssh2 Apr 8 21:50:45 andromeda sshd[18818]: Invalid user soto from 104.248.117.234 port 42926 |
2020-04-09 06:13:18 |
| 106.13.70.63 | attackbotsspam | 2020-04-08T23:43:21.825904amanda2.illicoweb.com sshd\[21522\]: Invalid user gfs1 from 106.13.70.63 port 51854 2020-04-08T23:43:21.829237amanda2.illicoweb.com sshd\[21522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.63 2020-04-08T23:43:23.527984amanda2.illicoweb.com sshd\[21522\]: Failed password for invalid user gfs1 from 106.13.70.63 port 51854 ssh2 2020-04-08T23:50:23.541631amanda2.illicoweb.com sshd\[22012\]: Invalid user postgres from 106.13.70.63 port 47382 2020-04-08T23:50:23.544412amanda2.illicoweb.com sshd\[22012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.63 ... |
2020-04-09 06:34:46 |
| 154.8.232.112 | attackbotsspam | Failed password for SOMEUSER from 154.8.232.112 port XXXX ssh2 |
2020-04-09 06:23:02 |
| 189.39.112.94 | attackspam | Apr 8 23:44:28 legacy sshd[25811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.39.112.94 Apr 8 23:44:30 legacy sshd[25811]: Failed password for invalid user uupc from 189.39.112.94 port 55280 ssh2 Apr 8 23:50:55 legacy sshd[26041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.39.112.94 ... |
2020-04-09 06:02:32 |
| 128.199.183.149 | attack | Exploit scan |
2020-04-09 06:31:19 |
| 200.61.190.81 | attack | Apr 9 00:11:10 sso sshd[16502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.61.190.81 Apr 9 00:11:11 sso sshd[16502]: Failed password for invalid user admin from 200.61.190.81 port 49164 ssh2 ... |
2020-04-09 06:20:49 |
| 138.197.185.188 | attack | Apr 8 23:43:35 Ubuntu-1404-trusty-64-minimal sshd\[12337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.185.188 user=root Apr 8 23:43:37 Ubuntu-1404-trusty-64-minimal sshd\[12337\]: Failed password for root from 138.197.185.188 port 58176 ssh2 Apr 8 23:50:20 Ubuntu-1404-trusty-64-minimal sshd\[16012\]: Invalid user deploy from 138.197.185.188 Apr 8 23:50:20 Ubuntu-1404-trusty-64-minimal sshd\[16012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.185.188 Apr 8 23:50:22 Ubuntu-1404-trusty-64-minimal sshd\[16012\]: Failed password for invalid user deploy from 138.197.185.188 port 40124 ssh2 |
2020-04-09 06:34:22 |
| 187.34.254.118 | attackbotsspam | 5x Failed Password |
2020-04-09 06:27:20 |
| 177.44.208.107 | attackspam | 2020-04-08T21:51:04.135615abusebot.cloudsearch.cf sshd[14507]: Invalid user elite from 177.44.208.107 port 35678 2020-04-08T21:51:04.148329abusebot.cloudsearch.cf sshd[14507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.44.208.107 2020-04-08T21:51:04.135615abusebot.cloudsearch.cf sshd[14507]: Invalid user elite from 177.44.208.107 port 35678 2020-04-08T21:51:06.409190abusebot.cloudsearch.cf sshd[14507]: Failed password for invalid user elite from 177.44.208.107 port 35678 ssh2 2020-04-08T21:53:32.968991abusebot.cloudsearch.cf sshd[14683]: Invalid user magic from 177.44.208.107 port 44468 2020-04-08T21:53:32.976942abusebot.cloudsearch.cf sshd[14683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.44.208.107 2020-04-08T21:53:32.968991abusebot.cloudsearch.cf sshd[14683]: Invalid user magic from 177.44.208.107 port 44468 2020-04-08T21:53:34.223842abusebot.cloudsearch.cf sshd[14683]: Failed password ... |
2020-04-09 05:54:48 |
| 96.84.240.89 | attackbots | Apr 8 18:39:43 ws12vmsma01 sshd[22883]: Invalid user test from 96.84.240.89 Apr 8 18:39:45 ws12vmsma01 sshd[22883]: Failed password for invalid user test from 96.84.240.89 port 54626 ssh2 Apr 8 18:49:41 ws12vmsma01 sshd[24402]: Invalid user site03 from 96.84.240.89 ... |
2020-04-09 06:33:15 |
| 168.121.137.189 | attackspambots | 20/4/8@17:50:27: FAIL: Alarm-Network address from=168.121.137.189 20/4/8@17:50:28: FAIL: Alarm-Network address from=168.121.137.189 ... |
2020-04-09 06:30:33 |
| 134.209.185.131 | attackbots | Apr 8 18:45:52 firewall sshd[3462]: Invalid user leonardo from 134.209.185.131 Apr 8 18:45:55 firewall sshd[3462]: Failed password for invalid user leonardo from 134.209.185.131 port 59808 ssh2 Apr 8 18:51:04 firewall sshd[3621]: Invalid user test from 134.209.185.131 ... |
2020-04-09 05:52:30 |
| 106.75.8.200 | attack | Apr 9 02:50:43 gw1 sshd[14226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.8.200 Apr 9 02:50:45 gw1 sshd[14226]: Failed password for invalid user deploy from 106.75.8.200 port 45698 ssh2 ... |
2020-04-09 06:14:20 |
| 46.175.21.30 | attack | SASL PLAIN auth failed: ruser=... |
2020-04-09 06:20:10 |